carbon-identity-framework

carbon-identity-framework Branch| Build Status ---|--- master| 此仓库包含 WSO2 Identity Server 产品所需的核心组件和功能。 从源码构建 如果你想从源码构建 carbon-identity-framework ： 1. 安装 Java 21。 2. 安装 Apache Maven 3.x.x（https://maven.apache.org/download.cgi） 3. 从本仓库获取克隆或下载源码（https://github.com/wso2/carbon-identity-framework.git...

DeliberatelyVulnerableWebApp

刻意存在漏洞的Web应用程序（Struts 2） 本项目是一个使用 Struts 2 框架的 Java Web 应用程序。它使用 Maven 构建，并可通过 Jetty 服务器运行。 前提条件 Java 开发工具包 JDK 8 或更高版本 Apache Maven 3.6.0 或更高版本 入门指南 构建项目 mvn clean install 使用 Jetty 运行项目 mvn jetty:run 访问应用程序 打开您的 Web 浏览器，访问 http://localhost:8080/dvwa。 项目结构 src/main/java：包含 Java 源代码。...

Quartz-1

编译： % mvn install -DskipTests 注意： a. 最终的Quartz jar文件位于 quartz/target 目录下 b. 如果你没有编译所需的Oracle和/或Weblogic第三方库jar包（由于许可问题，这些包无法在公共Maven仓库中找到），你可以在主 pom.xml 中注释掉这些模块，或者下载并安装所需的工件。 对于Oracle：ojdbc5.jar 可以在 http://www.oracle.com/technetwork/database/enterprise-edition/jdbc-112010-090769.html 找到...

CVE-2012-2982

CVE 2012-2982 エクスプロイト ビルド mvn clean install エクスプロイト java -jar ./target/CVE-2012-2982-1.0-SNAPSHOT-jar-with-dependencies.jar...

ROOT-APP-MAVEN-CVE-2026-47838 CVE-2026-47838 in io.root.org.springframework.security:spring-security-web - Patched by Root

Root has patched CVE-2026-47838 in the io.root.org.springframework.security:spring-security-web package for Root:Maven. Multiple fixed versions available...

Log4Shell-Minecraft-Server

Java Unmarshaller Security - Turning your data into code execu...

vpn_exploitation_tool

AD + Citrix VPN Data Harvester Modular Java tool for testing...

EUVD-2022-3767

Malicious code in bioql PyPI...

marshalsec

It is an offensive tool for Java deserialization vulnerabilities. The repository contains a Java tool called "marshalsec" that exploits Java object deserialization vulnerabilities, allowing for remote code execution. The tool includes payload generators for various Java serialization libraries,...

CVE-2024-31139

In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector...

CVE-2019-10248

Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of Vorto might be infected...

CVE-2019-10240

Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of hawkBit might be infected...

Arbitrary Command Injection

Overview Affected versions of this package are vulnerable to Arbitrary Command Injection due to insufficient validation of input parameters in the maven build process. An attacker can execute arbitrary commands by injecting malicious input into the build parameters. Note: This is only exploitable...

GHSA-5V69-92VW-FMJH Apache StreamPark: maven build params could trigger remote command execution

In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and...

GHSA-7G94-HFQC-Q993 Apache StreamPark: Unchecked maven build params could trigger remote command execution

In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and...

CVE-2024-29737

The Apache StreamPark development and management environment is vulnerable to command injection in its Project module due to insufficient validation of input parameters during Maven compilation. Specifically, the application fails to intercept or verify the backtick (``) character. An attacker wi...

CVE-2024-29737 Apache StreamPark (incubating): maven build params could trigger remote command execution

In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and...

CVE-2024-29737 Apache StreamPark (incubating): maven build params could trigger remote command execution

In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and...

CVE-2023-52291

The Apache StreamPark development and management environment is vulnerable to command injection in its "Project" module due to insufficient validation of Maven build arguments. Specifically, the "<" operator is not correctly processed, allowing an attacker to execute arbitrary commands (e.g., ...

CVE-2023-52291 Apache StreamPark (incubating): Unchecked maven build params could trigger remote command execution

In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and...